Starstruk Logo MarkStarstruk

v3.6.24

aigc3d/LAMv3.6.24Jul 24, 2026by github-actions[bot]

AI Summary

This release patches the same security vulnerability and fixes bugs including missing CRD fields, log errors, and server behavior for CONNECT requests and gRPC.

Key Highlights

  • Fixes CVE GHSA-3ccp-42pg-hgv6
  • Adds missing ErrorRequestHeaders field to CRDs
  • Updates google.golang.org/grpc to v1.82.1
  • Modifies CONNECT request handling (defer payload, discard body)
  • Disables Zstd support in the gzhttp wrapper

Breaking Changes

  • Discard CONNECT body in forwardauth
  • Reject CONNECT requests with fast proxy
  • Disable Zstd support in the gzhttp wrapper

Full Release Notes

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v3624).

**CVE fixed:**
- Advisory [GHSA-3ccp-42pg-hgv6](https://github.com/traefik/traefik/security/advisories/GHSA-3ccp-42pg-hgv6)

**Bug fixes:**
- **[middleware, k8s/crd]** Add missing ErrorRequestHeaders field to CRDs ([#13498](https://github.com/traefik/traefik/pull/13498) @kevinpollet)
- **[logs]** Remove unrelated error from nonexistent cert resolver log ([#13469](https://github.com/traefik/traefik/pull/13469) @ArthurHlt)
- **[middleware]** Disable Zstd support in the gzhttp wrapper ([#13533](https://github.com/traefik/traefik/pull/13533) @kevinpollet)
- **[server]** Defer the CONNECT payload until the backend accepts the tunnel ([#13542](https://github.com/traefik/traefik/pull/13542) @sdelicata)
- **[server]** Discard CONNECT body in forwardauth and reject CONNECT requests with fast proxy ([#13543](https://github.com/traefik/traefik/pull/13543) @sdelicata)
- **[server]** Bump google.golang.org/grpc to v1.82.1 ([#13551](https://github.com/traefik/traefik/pull/13551) @piscue)
- **[server]** Do not add back CONNECT requests to the pool ([#13556](https://github.com/traefik/traefik/pull/13556) @kevinpollet)

**Documentation:**
- **[k8s]** Align certificateRef and indicate ports ([#13473](https://github.com/traefik/traefik/pull/13473) @veenoise)
- **[rules]** Fix syntax notes in routing rule documentation ([#13501](https://github.com/traefik/traefik/pull/13501) @stevenlele)
- Add a migration note for CONNECT requests ([#13554](https://github.com/traefik/traefik/pull/13554) @kevinpollet)